alchemy 2.0.0-beta.cli-platform-split → 2.0.0-beta.pkg-setup-rc

package/lib/AWS/EKS/Cluster.js

@@ -0,0 +1,375 @@
+import * as eks from "@distilled.cloud/aws/eks";
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import * as Schedule from "effect/Schedule";
+import { isResolved } from "../../Diff.js";
+import { deleteObjects, reconcileObjects, } from "../../Kubernetes/client.js";
+import {} from "../../Kubernetes/types.js";
+import { createPhysicalName } from "../../PhysicalName.js";
+import * as Provider from "../../Provider.js";
+import { Resource } from "../../Resource.js";
+import { createInternalTags, diffTags, hasAlchemyTags } from "../../Tags.js";
+/**
+ * An Amazon EKS cluster with support for EKS Auto Mode settings.
+ *
+ * @section Creating Clusters
+ * @example Auto Mode Cluster from Existing Roles and Subnets
+ * ```typescript
+ * const cluster = yield* Cluster("AppCluster", {
+ *   roleArn: clusterRole.roleArn,
+ *   resourcesVpcConfig: {
+ *     subnetIds: network.privateSubnetIds,
+ *     endpointPublicAccess: true,
+ *     endpointPrivateAccess: true,
+ *   },
+ *   accessConfig: {
+ *     authenticationMode: "API",
+ *   },
+ *   computeConfig: {
+ *     enabled: true,
+ *     nodeRoleArn: nodeRole.roleArn,
+ *     nodePools: ["system", "general-purpose"],
+ *   },
+ *   kubernetesNetworkConfig: {
+ *     elasticLoadBalancing: { enabled: true },
+ *   },
+ *   storageConfig: {
+ *     blockStorage: { enabled: true },
+ *   },
+ * });
+ * ```
+ */
+export const Cluster = Resource("AWS.EKS.Cluster");
+class ClusterNotReady extends Data.TaggedError("EKS.ClusterNotReady") {
+}
+class ClusterStillExists extends Data.TaggedError("EKS.ClusterStillExists") {
+}
+class ClusterUpdateNotComplete extends Data.TaggedError("EKS.ClusterUpdateNotComplete") {
+}
+const normalizeTags = (tags) => Object.fromEntries(Object.entries(tags ?? {}).filter((entry) => entry[1] !== undefined));
+const jsonEqual = (a, b) => JSON.stringify(a ?? undefined) === JSON.stringify(b ?? undefined);
+const updateRetrySchedule = Schedule.exponential("1 second").pipe(Schedule.both(Schedule.recurs(120)));
+const getKubernetesConnection = (state) => {
+    if (!state.endpoint || !state.certificateAuthorityData) {
+        throw new Error(`EKS cluster '${state.clusterName}' is missing endpoint or certificate authority data`);
+    }
+    return {
+        clusterName: state.clusterName,
+        endpoint: state.endpoint,
+        certificateAuthorityData: state.certificateAuthorityData,
+    };
+};
+const getDesiredKubernetesObjects = (bindings) => bindings
+    .filter((binding) => binding.data.type === "kubernetes-object")
+    .map((binding) => binding.data.object);
+const clusterConfigChanged = (olds, news) => !jsonEqual(olds.resourcesVpcConfig, news.resourcesVpcConfig) ||
+    !jsonEqual(olds.accessConfig?.authenticationMode, news.accessConfig?.authenticationMode) ||
+    !jsonEqual(olds.computeConfig, news.computeConfig) ||
+    !jsonEqual(olds.storageConfig, news.storageConfig) ||
+    !jsonEqual(olds.kubernetesNetworkConfig, news.kubernetesNetworkConfig) ||
+    !jsonEqual(olds.logging, news.logging) ||
+    !jsonEqual(olds.upgradePolicy, news.upgradePolicy) ||
+    (olds.deletionProtection ?? false) !== (news.deletionProtection ?? false);
+const mapClusterState = (cluster, tags, kubernetesObjects) => ({
+    clusterArn: cluster.arn,
+    clusterName: cluster.name,
+    status: cluster.status ?? "CREATING",
+    endpoint: cluster.endpoint,
+    certificateAuthorityData: cluster.certificateAuthority?.data,
+    version: cluster.version,
+    platformVersion: cluster.platformVersion,
+    roleArn: cluster.roleArn,
+    resourcesVpcConfig: {
+        subnetIds: cluster.resourcesVpcConfig?.subnetIds ?? [],
+        securityGroupIds: cluster.resourcesVpcConfig?.securityGroupIds ?? [],
+        clusterSecurityGroupId: cluster.resourcesVpcConfig?.clusterSecurityGroupId,
+        vpcId: cluster.resourcesVpcConfig?.vpcId,
+        endpointPublicAccess: cluster.resourcesVpcConfig?.endpointPublicAccess,
+        endpointPrivateAccess: cluster.resourcesVpcConfig?.endpointPrivateAccess,
+        publicAccessCidrs: cluster.resourcesVpcConfig?.publicAccessCidrs ?? [],
+    },
+    accessConfig: cluster.accessConfig,
+    computeConfig: cluster.computeConfig,
+    storageConfig: cluster.storageConfig,
+    kubernetesNetworkConfig: cluster.kubernetesNetworkConfig,
+    logging: cluster.logging,
+    upgradePolicy: cluster.upgradePolicy,
+    deletionProtection: cluster.deletionProtection ?? false,
+    oidcIssuer: cluster.identity?.oidc?.issuer,
+    tags,
+    kubernetesObjects,
+});
+export const ClusterProvider = () => Provider.effect(Cluster, Effect.gen(function* () {
+    const toClusterName = (id, props = {}) => props.clusterName
+        ? Effect.succeed(props.clusterName)
+        : createPhysicalName({ id, maxLength: 100 });
+    const toClientRequestToken = (id, action) => createPhysicalName({
+        id: `${id}-${action}`,
+        maxLength: 64,
+        delimiter: "-",
+    });
+    const validateProps = Effect.fn(function* (props) {
+        const subnetIds = props.resourcesVpcConfig.subnetIds ?? [];
+        if (subnetIds.length < 2) {
+            return yield* Effect.fail(new Error("AWS.EKS.Cluster requires at least two subnet IDs"));
+        }
+        if (props.computeConfig?.enabled &&
+            props.accessConfig?.authenticationMode === "CONFIG_MAP") {
+            return yield* Effect.fail(new Error("AWS.EKS.Cluster Auto Mode requires accessConfig.authenticationMode to include API access"));
+        }
+    });
+    const readCluster = Effect.fn(function* ({ clusterName, kubernetesObjects, }) {
+        const described = yield* eks
+            .describeCluster({
+            name: clusterName,
+        })
+            .pipe(Effect.catchTag("ResourceNotFoundException", () => Effect.succeed(undefined)));
+        const cluster = described?.cluster;
+        if (!cluster?.arn || !cluster.name || !cluster.roleArn) {
+            return undefined;
+        }
+        const listedTags = yield* eks
+            .listTagsForResource({
+            resourceArn: cluster.arn,
+        })
+            .pipe(Effect.catchTag("NotFoundException", () => Effect.succeed(undefined)));
+        const tags = normalizeTags(listedTags?.tags ?? cluster.tags);
+        return mapClusterState(cluster, tags, kubernetesObjects ?? []);
+    });
+    const resolveOwnedCluster = Effect.fn(function* (id, clusterName) {
+        const state = yield* readCluster({
+            clusterName,
+        });
+        if (!state) {
+            return yield* Effect.fail(new Error(`cluster '${clusterName}' exists but could not be read`));
+        }
+        if (!(yield* hasAlchemyTags(id, state.tags))) {
+            return yield* Effect.fail(new Error(`cluster '${clusterName}' already exists and is not managed by alchemy`));
+        }
+        return state;
+    });
+    const waitForClusterActive = (clusterName, kubernetesObjects = []) => readCluster({
+        clusterName,
+        kubernetesObjects,
+    }).pipe(Effect.flatMap((state) => {
+        if (!state) {
+            return Effect.fail(new ClusterNotReady({
+                status: undefined,
+            }));
+        }
+        if (state.status === "ACTIVE") {
+            return Effect.succeed(state);
+        }
+        if (state.status === "FAILED") {
+            return Effect.fail(new Error(`EKS cluster '${clusterName}' entered FAILED state`));
+        }
+        return Effect.fail(new ClusterNotReady({
+            status: state.status,
+        }));
+    }), Effect.retry({
+        while: (error) => error instanceof ClusterNotReady,
+        schedule: updateRetrySchedule,
+    }));
+    const waitForClusterDeleted = (clusterName) => readCluster({
+        clusterName,
+    }).pipe(Effect.flatMap((state) => state
+        ? Effect.fail(new ClusterStillExists())
+        : Effect.succeed(undefined)), Effect.retry({
+        while: (error) => error instanceof ClusterStillExists,
+        schedule: updateRetrySchedule,
+    }));
+    const waitForUpdate = (clusterName, updateId) => eks
+        .describeUpdate({
+        name: clusterName,
+        updateId,
+    })
+        .pipe(Effect.flatMap(({ update }) => {
+        if (update?.status === "Successful") {
+            return Effect.succeed(update);
+        }
+        if (update?.status === "Failed" ||
+            update?.status === "Cancelled") {
+            return Effect.fail(new Error(`EKS cluster update '${updateId}' failed with status '${update?.status}'`));
+        }
+        return Effect.fail(new ClusterUpdateNotComplete({
+            status: update?.status,
+        }));
+    }), Effect.retry({
+        while: (error) => error instanceof ClusterUpdateNotComplete,
+        schedule: updateRetrySchedule,
+    }));
+    return {
+        stables: ["clusterArn", "clusterName"],
+        diff: Effect.fn(function* ({ id, olds = {}, news }) {
+            if (!isResolved(news))
+                return;
+            if ((yield* toClusterName(id, olds)) !==
+                (yield* toClusterName(id, news ?? {}))) {
+                return { action: "replace" };
+            }
+            if (olds.roleArn !== news.roleArn) {
+                return { action: "replace" };
+            }
+            if (olds.accessConfig?.bootstrapClusterCreatorAdminPermissions !==
+                news.accessConfig?.bootstrapClusterCreatorAdminPermissions) {
+                return { action: "replace" };
+            }
+            if (olds.kubernetesNetworkConfig?.serviceIpv4Cidr !==
+                news.kubernetesNetworkConfig?.serviceIpv4Cidr ||
+                olds.kubernetesNetworkConfig?.ipFamily !==
+                    news.kubernetesNetworkConfig?.ipFamily) {
+                return { action: "replace" };
+            }
+            if (olds.computeConfig?.nodeRoleArn !==
+                news.computeConfig?.nodeRoleArn &&
+                (olds.computeConfig?.enabled || news.computeConfig?.enabled)) {
+                return { action: "replace" };
+            }
+        }),
+        read: Effect.fn(function* ({ id, olds, output }) {
+            const clusterName = output?.clusterName ?? (yield* toClusterName(id, olds ?? {}));
+            return yield* readCluster({
+                clusterName,
+                kubernetesObjects: output?.kubernetesObjects,
+            });
+        }),
+        create: Effect.fn(function* ({ id, news, bindings, session }) {
+            yield* validateProps(news);
+            const clusterName = yield* toClusterName(id, news);
+            const desiredObjects = getDesiredKubernetesObjects(bindings);
+            const tags = {
+                ...(yield* createInternalTags(id)),
+                ...news.tags,
+            };
+            yield* eks
+                .createCluster({
+                name: clusterName,
+                version: news.version,
+                roleArn: news.roleArn,
+                resourcesVpcConfig: news.resourcesVpcConfig,
+                kubernetesNetworkConfig: news.kubernetesNetworkConfig,
+                logging: news.logging,
+                accessConfig: news.accessConfig,
+                computeConfig: news.computeConfig,
+                storageConfig: news.storageConfig,
+                deletionProtection: news.deletionProtection,
+                upgradePolicy: news.upgradePolicy,
+                tags,
+                clientRequestToken: yield* toClientRequestToken(id, "create"),
+            })
+                .pipe(Effect.catchTag("ResourceInUseException", () => resolveOwnedCluster(id, clusterName).pipe(Effect.asVoid)));
+            yield* session.note(`Creating EKS cluster ${clusterName}...`);
+            const cluster = yield* waitForClusterActive(clusterName);
+            const kubernetesObjects = yield* reconcileObjects({
+                connection: getKubernetesConnection(cluster),
+                previousObjects: [],
+                desiredObjects,
+            });
+            return {
+                ...cluster,
+                kubernetesObjects,
+            };
+        }),
+        update: Effect.fn(function* ({ id, news, olds, output, bindings, session, }) {
+            yield* validateProps(news);
+            if (clusterConfigChanged(olds, news)) {
+                const configUpdate = yield* eks.updateClusterConfig({
+                    name: output.clusterName,
+                    resourcesVpcConfig: news.resourcesVpcConfig,
+                    logging: news.logging,
+                    accessConfig: news.accessConfig
+                        ? {
+                            authenticationMode: news.accessConfig.authenticationMode,
+                        }
+                        : undefined,
+                    upgradePolicy: news.upgradePolicy,
+                    computeConfig: news.computeConfig,
+                    kubernetesNetworkConfig: news.kubernetesNetworkConfig,
+                    storageConfig: news.storageConfig,
+                    deletionProtection: news.deletionProtection,
+                    clientRequestToken: yield* toClientRequestToken(id, "config"),
+                });
+                if (configUpdate.update?.id) {
+                    yield* session.note(`Updating EKS cluster config ${output.clusterName}...`);
+                    yield* waitForUpdate(output.clusterName, configUpdate.update.id);
+                    yield* waitForClusterActive(output.clusterName, output.kubernetesObjects ?? []);
+                }
+            }
+            if (olds.version !== news.version && news.version) {
+                const versionUpdate = yield* eks.updateClusterVersion({
+                    name: output.clusterName,
+                    version: news.version,
+                    clientRequestToken: yield* toClientRequestToken(id, "version"),
+                });
+                if (versionUpdate.update?.id) {
+                    yield* session.note(`Updating EKS cluster version ${output.clusterName}...`);
+                    yield* waitForUpdate(output.clusterName, versionUpdate.update.id);
+                    yield* waitForClusterActive(output.clusterName, output.kubernetesObjects ?? []);
+                }
+            }
+            const oldTags = {
+                ...(yield* createInternalTags(id)),
+                ...olds.tags,
+            };
+            const newTags = {
+                ...(yield* createInternalTags(id)),
+                ...news.tags,
+            };
+            const { removed, upsert } = diffTags(oldTags, newTags);
+            if (upsert.length > 0) {
+                yield* eks.tagResource({
+                    resourceArn: output.clusterArn,
+                    tags: Object.fromEntries(upsert.map((tag) => [tag.Key, tag.Value])),
+                });
+            }
+            if (removed.length > 0) {
+                yield* eks.untagResource({
+                    resourceArn: output.clusterArn,
+                    tagKeys: removed,
+                });
+            }
+            yield* session.note(output.clusterArn);
+            const state = yield* readCluster({
+                clusterName: output.clusterName,
+                kubernetesObjects: output.kubernetesObjects ?? [],
+            }).pipe(Effect.flatMap((state) => state
+                ? Effect.succeed(state)
+                : Effect.fail(new Error(`EKS cluster '${output.clusterName}' could not be read after update`))));
+            const kubernetesObjects = yield* reconcileObjects({
+                connection: getKubernetesConnection(state),
+                previousObjects: output.kubernetesObjects ?? [],
+                desiredObjects: getDesiredKubernetesObjects(bindings),
+            });
+            return {
+                ...state,
+                kubernetesObjects,
+            };
+        }),
+        delete: Effect.fn(function* ({ id, output }) {
+            if ((output.kubernetesObjects ?? []).length > 0) {
+                yield* deleteObjects({
+                    connection: getKubernetesConnection(output),
+                    objects: output.kubernetesObjects ?? [],
+                });
+            }
+            if (output.deletionProtection) {
+                const disableDeletionProtection = yield* eks.updateClusterConfig({
+                    name: output.clusterName,
+                    deletionProtection: false,
+                    clientRequestToken: yield* toClientRequestToken(id, "disable-deletion-protection"),
+                });
+                if (disableDeletionProtection.update?.id) {
+                    yield* waitForUpdate(output.clusterName, disableDeletionProtection.update.id);
+                    yield* waitForClusterActive(output.clusterName, output.kubernetesObjects ?? []);
+                }
+            }
+            yield* eks
+                .deleteCluster({
+                name: output.clusterName,
+            })
+                .pipe(Effect.catchTag("ResourceNotFoundException", () => Effect.void));
+            yield* waitForClusterDeleted(output.clusterName);
+        }),
+    };
+}));
+//# sourceMappingURL=Cluster.js.map

package/lib/AWS/EKS/Cluster.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Cluster.js","sourceRoot":"","sources":["../../../src/AWS/EKS/Cluster.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAChD,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EACL,aAAa,EACb,gBAAgB,GAEjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAIN,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAwB,MAAM,mBAAmB,CAAC;AAEnE,OAAO,EAAE,kBAAkB,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAwF7E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,QAAQ,CAAU,iBAAiB,CAAC,CAAC;AAE5D,MAAM,eAAgB,SAAQ,IAAI,CAAC,WAAW,CAAC,qBAAqB,CAElE;CAAG;AAEL,MAAM,kBAAmB,SAAQ,IAAI,CAAC,WAAW,CAC/C,wBAAwB,CACrB;CAAG;AAER,MAAM,wBAAyB,SAAQ,IAAI,CAAC,WAAW,CACrD,8BAA8B,CAG9B;CAAG;AAEL,MAAM,aAAa,GAAG,CAAC,IAAoD,EAAE,EAAE,CAC7E,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAC/B,CAAC,KAAK,EAA6B,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAC7D,CACF,CAAC;AAEJ,MAAM,SAAS,GAAG,CAAC,CAAU,EAAE,CAAU,EAAE,EAAE,CAC3C,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,SAAS,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC;AAEpE,MAAM,mBAAmB,GAAG,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,IAAI,CAC/D,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CACpC,CAAC;AAEF,MAAM,uBAAuB,GAAG,CAC9B,KAGC,EAC4B,EAAE;IAC/B,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,wBAAwB,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CACb,gBAAgB,KAAK,CAAC,WAAW,qDAAqD,CACvF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,wBAAwB,EAAE,KAAK,CAAC,wBAAwB;KACzD,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,2BAA2B,GAAG,CAClC,QAAiE,EACnC,EAAE,CAChC,QAAQ;KACL,MAAM,CACL,CAAC,OAAO,EAAuD,EAAE,CAC/D,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,mBAAmB,CAC5C;KACA,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAE3C,MAAM,oBAAoB,GAAG,CAAC,IAAkB,EAAE,IAAkB,EAAE,EAAE,CACtE,CAAC,SAAS,CAAC,IAAI,CAAC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,CAAC;IAC5D,CAAC,SAAS,CACR,IAAI,CAAC,YAAY,EAAE,kBAAkB,EACrC,IAAI,CAAC,YAAY,EAAE,kBAAkB,CACtC;IACD,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC;IAClD,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC;IAClD,CAAC,SAAS,CAAC,IAAI,CAAC,uBAAuB,EAAE,IAAI,CAAC,uBAAuB,CAAC;IACtE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC;IACtC,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC;IAClD,CAAC,IAAI,CAAC,kBAAkB,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,KAAK,CAAC,CAAC;AAE5E,MAAM,eAAe,GAAG,CACtB,OAAoB,EACpB,IAA4B,EAC5B,iBAAwC,EACjB,EAAE,CAAC,CAAC;IAC3B,UAAU,EAAE,OAAO,CAAC,GAAiB;IACrC,WAAW,EAAE,OAAO,CAAC,IAAK;IAC1B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,UAAU;IACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ;IAC1B,wBAAwB,EAAE,OAAO,CAAC,oBAAoB,EAAE,IAAI;IAC5D,OAAO,EAAE,OAAO,CAAC,OAAO;IACxB,eAAe,EAAE,OAAO,CAAC,eAAe;IACxC,OAAO,EAAE,OAAO,CAAC,OAAQ;IACzB,kBAAkB,EAAE;QAClB,SAAS,EAAE,OAAO,CAAC,kBAAkB,EAAE,SAAS,IAAI,EAAE;QACtD,gBAAgB,EAAE,OAAO,CAAC,kBAAkB,EAAE,gBAAgB,IAAI,EAAE;QACpE,sBAAsB,EAAE,OAAO,CAAC,kBAAkB,EAAE,sBAAsB;QAC1E,KAAK,EAAE,OAAO,CAAC,kBAAkB,EAAE,KAAK;QACxC,oBAAoB,EAAE,OAAO,CAAC,kBAAkB,EAAE,oBAAoB;QACtE,qBAAqB,EAAE,OAAO,CAAC,kBAAkB,EAAE,qBAAqB;QACxE,iBAAiB,EAAE,OAAO,CAAC,kBAAkB,EAAE,iBAAiB,IAAI,EAAE;KACvE;IACD,YAAY,EAAE,OAAO,CAAC,YAAY;IAClC,aAAa,EAAE,OAAO,CAAC,aAAa;IACpC,aAAa,EAAE,OAAO,CAAC,aAAa;IACpC,uBAAuB,EAAE,OAAO,CAAC,uBAAuB;IACxD,OAAO,EAAE,OAAO,CAAC,OAAO;IACxB,aAAa,EAAE,OAAO,CAAC,aAAa;IACpC,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,IAAI,KAAK;IACvD,UAAU,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM;IAC1C,IAAI;IACJ,iBAAiB;CAClB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,EAAE,CAClC,QAAQ,CAAC,MAAM,CACb,OAAO,EACP,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,aAAa,GAAG,CACpB,EAAU,EACV,QAAkC,EAAE,EACpC,EAAE,CACF,KAAK,CAAC,WAAW;QACf,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QACnC,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IAEjD,MAAM,oBAAoB,GAAG,CAAC,EAAU,EAAE,MAAc,EAAE,EAAE,CAC1D,kBAAkB,CAAC;QACjB,EAAE,EAAE,GAAG,EAAE,IAAI,MAAM,EAAE;QACrB,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,GAAG;KACf,CAAC,CAAC;IAEL,MAAM,aAAa,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAmB;QAC5D,MAAM,SAAS,GAAG,KAAK,CAAC,kBAAkB,CAAC,SAAS,IAAI,EAAE,CAAC;QAC3D,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAC9D,CAAC;QACJ,CAAC;QACD,IACE,KAAK,CAAC,aAAa,EAAE,OAAO;YAC5B,KAAK,CAAC,YAAY,EAAE,kBAAkB,KAAK,YAAY,EACvD,CAAC;YACD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,0FAA0F,CAC3F,CACF,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EACvC,WAAW,EACX,iBAAiB,GAIlB;QACC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,GAAG;aACzB,eAAe,CAAC;YACf,IAAI,EAAE,WAAW;SAClB,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAChD,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CAAC;QACJ,MAAM,OAAO,GAAG,SAAS,EAAE,OAAO,CAAC;QACnC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACvD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,GAAG;aAC1B,mBAAmB,CAAC;YACnB,WAAW,EAAE,OAAO,CAAC,GAAG;SACzB,CAAC;aACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE,CACxC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC1B,CACF,CAAC;QACJ,MAAM,IAAI,GAAG,aAAa,CAAC,UAAU,EAAE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7D,OAAO,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE,iBAAiB,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAC7C,EAAU,EACV,WAAmB;QAEnB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC;YAC/B,WAAW;SACZ,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CAAC,YAAY,WAAW,gCAAgC,CAAC,CACnE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC7C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,IAAI,KAAK,CACP,YAAY,WAAW,gDAAgD,CACxE,CACF,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,MAAM,oBAAoB,GAAG,CAC3B,WAAmB,EACnB,oBAA2C,EAAE,EAC7C,EAAE,CACF,WAAW,CAAC;QACV,WAAW;QACX,iBAAiB;KAClB,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACvB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,eAAe,CAAC;gBAClB,MAAM,EAAE,SAAS;aAClB,CAAC,CACH,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,KAAK,CAAC,gBAAgB,WAAW,wBAAwB,CAAC,CAC/D,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,eAAe,CAAC;YAClB,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,EACF,MAAM,CAAC,KAAK,CAAC;QACX,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,eAAe;QAClD,QAAQ,EAAE,mBAAmB;KAC9B,CAAC,CACH,CAAC;IAEJ,MAAM,qBAAqB,GAAG,CAAC,WAAmB,EAAE,EAAE,CACpD,WAAW,CAAC;QACV,WAAW;KACZ,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,KAAK;QACH,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,kBAAkB,EAAE,CAAC;QACvC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAC9B,EACD,MAAM,CAAC,KAAK,CAAC;QACX,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,kBAAkB;QACrD,QAAQ,EAAE,mBAAmB;KAC9B,CAAC,CACH,CAAC;IAEJ,MAAM,aAAa,GAAG,CAAC,WAAmB,EAAE,QAAgB,EAAE,EAAE,CAC9D,GAAG;SACA,cAAc,CAAC;QACd,IAAI,EAAE,WAAW;QACjB,QAAQ;KACT,CAAC;SACD,IAAI,CACH,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE;QAC5B,IAAI,MAAM,EAAE,MAAM,KAAK,YAAY,EAAE,CAAC;YACpC,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QACD,IACE,MAAM,EAAE,MAAM,KAAK,QAAQ;YAC3B,MAAM,EAAE,MAAM,KAAK,WAAW,EAC9B,CAAC;YACD,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,KAAK,CACP,uBAAuB,QAAQ,yBAAyB,MAAM,EAAE,MAAM,GAAG,CAC1E,CACF,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,wBAAwB,CAAC;YAC3B,MAAM,EAAE,MAAM,EAAE,MAAM;SACvB,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,EACF,MAAM,CAAC,KAAK,CAAC;QACX,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,wBAAwB;QAC3D,QAAQ,EAAE,mBAAmB;KAC9B,CAAC,CACH,CAAC;IAEN,OAAO;QACL,OAAO,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC;QACtC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,GAAG,EAAkB,EAAE,IAAI,EAAE;YAChE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO;YAC9B,IACE,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;gBAChC,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,EACtC,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,IACE,IAAI,CAAC,YAAY,EAAE,uCAAuC;gBAC1D,IAAI,CAAC,YAAY,EAAE,uCAAuC,EAC1D,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,IACE,IAAI,CAAC,uBAAuB,EAAE,eAAe;gBAC3C,IAAI,CAAC,uBAAuB,EAAE,eAAe;gBAC/C,IAAI,CAAC,uBAAuB,EAAE,QAAQ;oBACpC,IAAI,CAAC,uBAAuB,EAAE,QAAQ,EACxC,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;YACD,IACE,IAAI,CAAC,aAAa,EAAE,WAAW;gBAC7B,IAAI,CAAC,aAAa,EAAE,WAAW;gBACjC,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,IAAI,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,EAC5D,CAAC;gBACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAW,CAAC;YACxC,CAAC;QACH,CAAC,CAAC;QACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YAC7C,MAAM,WAAW,GACf,MAAM,EAAE,WAAW,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;YAChE,OAAO,KAAK,CAAC,CAAC,WAAW,CAAC;gBACxB,WAAW;gBACX,iBAAiB,EAAE,MAAM,EAAE,iBAAiB;aAC7C,CAAC,CAAC;QACL,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE;YAC1D,KAAK,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YAE3B,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YACnD,MAAM,cAAc,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAC;YAC7D,MAAM,IAAI,GAAG;gBACX,GAAG,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBAClC,GAAG,IAAI,CAAC,IAAI;aACb,CAAC;YAEF,KAAK,CAAC,CAAC,GAAG;iBACP,aAAa,CAAC;gBACb,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;gBAC3C,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;gBACrD,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;gBAC3C,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,IAAI;gBACJ,kBAAkB,EAAE,KAAK,CAAC,CAAC,oBAAoB,CAAC,EAAE,EAAE,QAAQ,CAAC;aAC9D,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAC7C,mBAAmB,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CACzD,CACF,CAAC;YAEJ,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,wBAAwB,WAAW,KAAK,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC;YACzD,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC;gBAChD,UAAU,EAAE,uBAAuB,CAAC,OAAO,CAAC;gBAC5C,eAAe,EAAE,EAAE;gBACnB,cAAc;aACf,CAAC,CAAC;YACH,OAAO;gBACL,GAAG,OAAO;gBACV,iBAAiB;aAClB,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAC3B,EAAE,EACF,IAAI,EACJ,IAAI,EACJ,MAAM,EACN,QAAQ,EACR,OAAO,GACR;YACC,KAAK,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YAE3B,IAAI,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;gBACrC,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC;oBAClD,IAAI,EAAE,MAAM,CAAC,WAAW;oBACxB,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;oBAC3C,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,YAAY,EAAE,IAAI,CAAC,YAAY;wBAC7B,CAAC,CAAC;4BACE,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,kBAAkB;yBACzD;wBACH,CAAC,CAAC,SAAS;oBACb,aAAa,EAAE,IAAI,CAAC,aAAa;oBACjC,aAAa,EAAE,IAAI,CAAC,aAAa;oBACjC,uBAAuB,EAAE,IAAI,CAAC,uBAAuB;oBACrD,aAAa,EAAE,IAAI,CAAC,aAAa;oBACjC,kBAAkB,EAAE,IAAI,CAAC,kBAAkB;oBAC3C,kBAAkB,EAAE,KAAK,CAAC,CAAC,oBAAoB,CAAC,EAAE,EAAE,QAAQ,CAAC;iBAC9D,CAAC,CAAC;gBACH,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC;oBAC5B,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,+BAA+B,MAAM,CAAC,WAAW,KAAK,CACvD,CAAC;oBACF,KAAK,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACjE,KAAK,CAAC,CAAC,oBAAoB,CACzB,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,iBAAiB,IAAI,EAAE,CAC/B,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClD,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC;oBACpD,IAAI,EAAE,MAAM,CAAC,WAAW;oBACxB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,kBAAkB,EAAE,KAAK,CAAC,CAAC,oBAAoB,CAAC,EAAE,EAAE,SAAS,CAAC;iBAC/D,CAAC,CAAC;gBACH,IAAI,aAAa,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC;oBAC7B,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CACjB,gCAAgC,MAAM,CAAC,WAAW,KAAK,CACxD,CAAC;oBACF,KAAK,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBAClE,KAAK,CAAC,CAAC,oBAAoB,CACzB,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,iBAAiB,IAAI,EAAE,CAC/B,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,MAAM,OAAO,GAAG;gBACd,GAAG,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBAClC,GAAG,IAAI,CAAC,IAAI;aACb,CAAC;YACF,MAAM,OAAO,GAAG;gBACd,GAAG,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;gBAClC,GAAG,IAAI,CAAC,IAAI;aACb,CAAC;YACF,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAEvD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,KAAK,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;oBACrB,WAAW,EAAE,MAAM,CAAC,UAAU;oBAC9B,IAAI,EAAE,MAAM,CAAC,WAAW,CACtB,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAU,CAAC,CACnD;iBACF,CAAC,CAAC;YACL,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvB,KAAK,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC;oBACvB,WAAW,EAAE,MAAM,CAAC,UAAU;oBAC9B,OAAO,EAAE,OAAO;iBACjB,CAAC,CAAC;YACL,CAAC;YAED,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAEvC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC;gBAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,EAAE;aAClD,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,KAAK;gBACH,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;gBACvB,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,KAAK,CACP,gBAAgB,MAAM,CAAC,WAAW,kCAAkC,CACrE,CACF,CACN,CACF,CAAC;YAEF,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC;gBAChD,UAAU,EAAE,uBAAuB,CAAC,KAAK,CAAC;gBAC1C,eAAe,EAAE,MAAM,CAAC,iBAAiB,IAAI,EAAE;gBAC/C,cAAc,EAAE,2BAA2B,CAAC,QAAQ,CAAC;aACtD,CAAC,CAAC;YAEH,OAAO;gBACL,GAAG,KAAK;gBACR,iBAAiB;aAClB,CAAC;QACJ,CAAC,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE;YACzC,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAChD,KAAK,CAAC,CAAC,aAAa,CAAC;oBACnB,UAAU,EAAE,uBAAuB,CAAC,MAAM,CAAC;oBAC3C,OAAO,EAAE,MAAM,CAAC,iBAAiB,IAAI,EAAE;iBACxC,CAAC,CAAC;YACL,CAAC;YAED,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;gBAC9B,MAAM,yBAAyB,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC;oBAC/D,IAAI,EAAE,MAAM,CAAC,WAAW;oBACxB,kBAAkB,EAAE,KAAK;oBACzB,kBAAkB,EAAE,KAAK,CAAC,CAAC,oBAAoB,CAC7C,EAAE,EACF,6BAA6B,CAC9B;iBACF,CAAC,CAAC;gBACH,IAAI,yBAAyB,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC;oBACzC,KAAK,CAAC,CAAC,aAAa,CAClB,MAAM,CAAC,WAAW,EAClB,yBAAyB,CAAC,MAAM,CAAC,EAAE,CACpC,CAAC;oBACF,KAAK,CAAC,CAAC,oBAAoB,CACzB,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,iBAAiB,IAAI,EAAE,CAC/B,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,KAAK,CAAC,CAAC,GAAG;iBACP,aAAa,CAAC;gBACb,IAAI,EAAE,MAAM,CAAC,WAAW;aACzB,CAAC;iBACD,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAChE,CAAC;YAEJ,KAAK,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACnD,CAAC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/AWS/EKS/LoadBalancedWorkload.d.ts

@@ -0,0 +1,89 @@
+import { type WorkloadProps, type WorkloadServiceProps } from "./Workload.ts";
+export type LoadBalancerScheme = "internet-facing" | "internal";
+export interface LoadBalancedWorkloadProps extends Omit<WorkloadProps, "service"> {
+    /**
+     * Service ports exposed by the load balancer.
+     */
+    ports: WorkloadServiceProps["ports"];
+    /**
+     * Optional explicit service name. Defaults to the workload name.
+     */
+    serviceName?: string;
+    /**
+     * Whether the Service should be internet-facing or internal.
+     * @default "internet-facing"
+     */
+    scheme?: LoadBalancerScheme;
+    /**
+     * Additional annotations to apply to the Service.
+     */
+    serviceAnnotations?: Record<string, string>;
+    /**
+     * Labels to apply to the Service.
+     */
+    serviceLabels?: Record<string, string>;
+}
+/**
+ * Creates a workload exposed through a Kubernetes `LoadBalancer` service.
+ *
+ * This helper is the ergonomic path for the common "run a deployment and make
+ * it reachable through the EKS-managed load balancer integration" flow.
+ *
+ * @example Internet-facing workload
+ * ```typescript
+ * const app = yield* LoadBalancedWorkload("api", {
+ *   cluster: cluster.cluster,
+ *   namespace: "default",
+ *   containers: [
+ *     {
+ *       name: "api",
+ *       image: "nginx:latest",
+ *       ports: [{ containerPort: 8080 }],
+ *     },
+ *   ],
+ *   ports: [{ port: 80, targetPort: 8080 }],
+ * });
+ * ```
+ */
+export declare const LoadBalancedWorkload: (id: string, props: LoadBalancedWorkloadProps) => import("effect/Effect").Effect<{
+    deployment: {
+        cluster: import("./Cluster.ts").Cluster;
+        apiVersion: string;
+        kind: string;
+        name: string;
+        namespace: string | undefined;
+        key: string;
+        object: {
+            apiVersion: string;
+            kind: string;
+            metadata: {
+                name: string;
+                namespace: string | undefined;
+                labels: Record<string, string> | undefined;
+                annotations: Record<string, string> | undefined;
+            };
+        };
+    };
+    service: {
+        cluster: import("./Cluster.ts").Cluster;
+        apiVersion: string;
+        kind: string;
+        name: string;
+        namespace: string | undefined;
+        key: string;
+        object: {
+            apiVersion: string;
+            kind: string;
+            metadata: {
+                name: string;
+                namespace: string | undefined;
+                labels: Record<string, string> | undefined;
+                annotations: Record<string, string> | undefined;
+            };
+        };
+    } | undefined;
+    name: string;
+    labels: Record<string, string>;
+    podLabels: Record<string, string>;
+}, never, never>;
+//# sourceMappingURL=LoadBalancedWorkload.d.ts.map

package/lib/AWS/EKS/LoadBalancedWorkload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"LoadBalancedWorkload.d.ts","sourceRoot":"","sources":["../../../src/AWS/EKS/LoadBalancedWorkload.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,oBAAoB,EAC1B,MAAM,eAAe,CAAC;AAEvB,MAAM,MAAM,kBAAkB,GAAG,iBAAiB,GAAG,UAAU,CAAC;AAEhE,MAAM,WAAW,yBAA0B,SAAQ,IAAI,CACrD,aAAa,EACb,SAAS,CACV;IACC;;OAEG;IACH,KAAK,EAAE,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACrC;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B;;OAEG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACxC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,oBAAoB,GAC/B,IAAI,MAAM,EACV,OAAO,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAgB9B,CAAC"}

package/lib/AWS/EKS/LoadBalancedWorkload.js

@@ -0,0 +1,38 @@
+import { Workload, } from "./Workload.js";
+/**
+ * Creates a workload exposed through a Kubernetes `LoadBalancer` service.
+ *
+ * This helper is the ergonomic path for the common "run a deployment and make
+ * it reachable through the EKS-managed load balancer integration" flow.
+ *
+ * @example Internet-facing workload
+ * ```typescript
+ * const app = yield* LoadBalancedWorkload("api", {
+ *   cluster: cluster.cluster,
+ *   namespace: "default",
+ *   containers: [
+ *     {
+ *       name: "api",
+ *       image: "nginx:latest",
+ *       ports: [{ containerPort: 8080 }],
+ *     },
+ *   ],
+ *   ports: [{ port: 80, targetPort: 8080 }],
+ * });
+ * ```
+ */
+export const LoadBalancedWorkload = (id, props) => Workload(id, {
+    ...props,
+    service: {
+        name: props.serviceName,
+        type: "LoadBalancer",
+        ports: props.ports,
+        labels: props.serviceLabels,
+        annotations: {
+            "service.beta.kubernetes.io/aws-load-balancer-scheme": props.scheme ?? "internet-facing",
+            ...props.serviceAnnotations,
+        },
+    },
+    ...props.serviceAnnotations,
+});
+//# sourceMappingURL=LoadBalancedWorkload.js.map

package/lib/AWS/EKS/LoadBalancedWorkload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"LoadBalancedWorkload.js","sourceRoot":"","sources":["../../../src/AWS/EKS/LoadBalancedWorkload.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,GAGT,MAAM,eAAe,CAAC;AA+BvB;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,EAAU,EACV,KAAgC,EAChC,EAAE,CACF,QAAQ,CAAC,EAAE,EAAE;IACX,GAAG,KAAK;IACR,OAAO,EAAE;QACP,IAAI,EAAE,KAAK,CAAC,WAAW;QACvB,IAAI,EAAE,cAAc;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,KAAK,CAAC,aAAa;QAC3B,WAAW,EAAE;YACX,qDAAqD,EACnD,KAAK,CAAC,MAAM,IAAI,iBAAiB;YACnC,GAAG,KAAK,CAAC,kBAAkB;SAC5B;KACF;IACD,GAAG,KAAK,CAAC,kBAAkB;CAC5B,CAAC,CAAC"}

package/lib/AWS/EKS/PodIdentityAssociation.d.ts

@@ -0,0 +1,73 @@
+import type { Input } from "../../Input.ts";
+import * as Provider from "../../Provider.ts";
+import { Resource } from "../../Resource.ts";
+import type { Providers } from "../Providers.ts";
+export interface PodIdentityAssociationProps {
+    /**
+     * Target cluster name.
+     */
+    clusterName: Input<string>;
+    /**
+     * Kubernetes namespace that owns the service account.
+     */
+    namespace: string;
+    /**
+     * Kubernetes service account name.
+     */
+    serviceAccount: string;
+    /**
+     * IAM role ARN assumed by pods for this association.
+     */
+    roleArn: Input<string>;
+    /**
+     * Disable session tags for the issued credentials.
+     */
+    disableSessionTags?: boolean;
+    /**
+     * Optional target role ARN for chained role assumption.
+     */
+    targetRoleArn?: Input<string>;
+    /**
+     * Optional inline session policy JSON.
+     */
+    policy?: string;
+    /**
+     * User-defined tags to apply to the association.
+     */
+    tags?: Record<string, string>;
+}
+export interface PodIdentityAssociation extends Resource<"AWS.EKS.PodIdentityAssociation", PodIdentityAssociationProps, {
+    associationArn: string;
+    associationId: string;
+    clusterName: string;
+    namespace: string;
+    serviceAccount: string;
+    roleArn: string;
+    disableSessionTags: boolean;
+    targetRoleArn: string | undefined;
+    externalId: string | undefined;
+    ownerArn: string | undefined;
+    policy: string | undefined;
+    tags: Record<string, string>;
+}, never, Providers> {
+}
+/**
+ * An Amazon EKS pod identity association that binds a service account to an IAM role.
+ *
+ * `PodIdentityAssociation` is the canonical workload-identity resource for EKS
+ * clusters that use EKS Pod Identity instead of IRSA.
+ *
+ * @section Managing Pod Identity
+ * @example Bind a Service Account to a Role
+ * ```typescript
+ * const association = yield* PodIdentityAssociation("ApiIdentity", {
+ *   clusterName: cluster.clusterName,
+ *   namespace: "default",
+ *   serviceAccount: "api",
+ *   roleArn: podRole.roleArn,
+ * });
+ * ```
+ */
+export declare const PodIdentityAssociation: import("../../Resource.ts").ResourceClass<PodIdentityAssociation>;
+export declare const PodIdentityAssociationProvider: () => import("effect/Layer").Layer<Provider.Provider<PodIdentityAssociation>, never, import("effect/unstable/http/HttpClient").HttpClient | import("../../Stage.ts").Stage | import("../../Stack.ts").Stack | import("@distilled.cloud/aws/Region").Region | import("@distilled.cloud/aws/Credentials").Credentials>;
+//# sourceMappingURL=PodIdentityAssociation.d.ts.map

package/lib/AWS/EKS/PodIdentityAssociation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PodIdentityAssociation.d.ts","sourceRoot":"","sources":["../../../src/AWS/EKS/PodIdentityAssociation.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAE5C,OAAO,KAAK,QAAQ,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAC7C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAGjD,MAAM,WAAW,2BAA2B;IAC1C;;OAEG;IACH,WAAW,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB;;OAEG;IACH,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACvB;;OAEG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;OAEG;IACH,aAAa,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,sBAAuB,SAAQ,QAAQ,CACtD,gCAAgC,EAChC,2BAA2B,EAC3B;IACE,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IAC/B,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7B,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B,EACD,KAAK,EACL,SAAS,CACV;CAAG;AAEJ;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,sBAAsB,mEAElC,CAAC;AAEF,eAAO,MAAM,8BAA8B,sTA4KxC,CAAC"}